Enterprise Security Engineer

The Security Engineer perform Security Risk Assessments (SRA) by analyzing computing environments to determine vulnerabilities, recommends safeguards to mitigate risks and performs compliance reviews to ensure applications, networks and servers are operating in accordance with established policies and procedures..

- Perform regular security audits of the infrastructure and the systems contained within it.
- Perform regular physical site inspections.
- Provide technical security guidance to business units.
- Audit the corporate and production environments to ensure that corporate security policies are being adhered to as well as to ensure security issues do not exist.
- Conduct network risk assessments, audits, and vulnerability scans primarily on Microsoft Windows platforms.
- To review all aspects of the network, facilities and policies to determine if there are security flaws or holes and provide details on corrective actions to be performed by the appropriate teams.
- Participate in the incident response team and coordinate any security incidents involving applications.
- Review SOHO applications and configurations to optimize a secure connection into corporate networks, i.e. Remote VPN, Anti-Virus, and PC FW deployments.
- Recommend standards and policies governing the security of firewall and IDS development, deployment, and operation.
- Assess the severity of newly discovered security vulnerabilities.
- Stays up to date with current industry trends and emerging technologies.
- Responsible for project managing all aspects of a technology.
- Responsible for working with internal clients, staff, and fellow IT colleagues to troubleshoot and resolve issues on a daily basis.
- Coordination and cooperation with the other IT colleagues and professionals for the successful implementation and operation of systems and applications.
- Responsible for helping to establish, implement and adhere to the corporate technology standards and guidelines.

Required Skills:
Education:
BS or BA degree in computer science, engineering, or business
Vendor Certifications a Plus; MCSE.

Experience/Skills:
4 to 6 years experience with network services systems.
Advanced knowledge of the Windows operating systems and LINUX.
Advanced knowledge of Active Directory Services
Advanced knowledge of security based upon PKI.
Strong skills with Cisco products: Wireless Access Points, PIX FW, Cisco Secure Access Server.
Experience with standard auditor tools such as Nessus, Nmap, Nikto, Snort, TCPDump, Windump, Kismet and Netstumbler none of this is must-have but candidates should be able to pick these up from basic manual instruction.
Strong knowledge of Network and Transport protocols (e.g. smtp, http, ftp, tcp/ip)
IDS/IPS Deployment and management.
Perl or VB Scripting
Candidate should be able to communicate effectively with both technical and non-technical groups.
Excellent organizational and project management skills.
Ability to excel in a fast-paced environment and work under pressure.
Must have excellent interpersonal skills and sound oral and written presentation skills.
Solid understanding of security architecture and assessments